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[57] ABSTRACT 

A system and method for the discrete identification of a 
duress transaction at an ATM txanking machine. The system 
and method allows the customer to alcit the police that a 
crime is taking place without alerting the criminal that an 
alarm has been given by the entry of an access number 
equating to a oon-prestored personal distress or emergency 
number in place of the stored PIN numba. When an access 
number is entered to begin a transaction, the system com- 
pares the entered access number with the prestored FIN 
number. If the entered access number is the same as the FIN 
number, the transaction proceeds as normal. If not, an 
algorithmic function is aj^lied to either the entered access 
number or the PIN numt>er. These two number arc then again 
compared and if after application of the algorithmic function 
they are the same, then the duress signal is triggered. Thus, 
the non-prestored personal distress number is successfully 
entered when Che access number entered to begin the trans- 
action equates to the PIN number after the algCKithmic 
function is applied to ei^er the entered access number cr the 
PIN number. As such, the system and method facilitates 
recall of a non-prestored personal distress number. 
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COMPUTE RIZED SYSTEM FOR DISCREET No. 4^34,932 issued to Gorgens discloses a security systan 

IDENTIFICATION OF DURESS for remote cash dispensers. Gorgens* inventioD is a system 

TRANSACTION AND/OR DURESS ACCESS to prevent theft by the intac^on and simulatioD of the 

information exchanged between the central computer and 

This application is a continuation of parent application 3 the remote transaction terminal (ATM). Gorgens' invention 

Ser. No. 08/329.457 filed on Oct. 26, 1994, now abandoned. in effect scrambles the uscr*s infoimatioo to make dccq)hcr- 

This invention relates to computerized transactions, and ing difficult and stolen information unusable. Gorgens dif- 

morc particularly, to a system and method for idcntiiying fcrs from the present invention in that, unlike the i^esent 

duress during a con^uterized transaction, specifically a invention, Gorgens does not provide a system that wlU allow 

computerized system and method for discreetly identifying a user to signal the authorities that a transaction is being 

involuntary transactions at automatic teller machines. niade under duress or being forcefully made. 

™™^,^™. ,.„rT^«^^v. U.S. Pat No. 4390.968, issued to Henncssy, et al,. 

BACKGROUND OF THE INVENTION ^^^^^^ ^ automated bank transaction security system 

With the advent of the Automatic Teller Machine (ATM), providing security measures to prevent the unauthorized 

it has become possible for banking withdrawals to be made access to a costuma's account. The invention of Henncssy, 

without the intervention of human bank personnel or agents. et aL prevents the transmission of signals from which a PIN 

While tiiis has been extremely beneficial to both the banks may be derived over transmission lines available to unau- 

and their customers in many ways, it has enabled felons to thcrizcd users. The invention of Henncssy, ct al. differs from 

extort money from ATM users. The usual f orra of tiiis the present invention because Ihe present invention provides 

extortion is to intimidate the ATM usex by threat of physical « system to identify and discrectiy notify the authonUcs of 

harm. Until now, there has been no adequate way for the ^ a duress trpsaction. Hennwsy, ct al. d^^^^ 

ATM user to signal distress without alartiig the felon along ^"^^^ ^ V.'^^^^'l ^^^^'"^"^^^'^ , 

with the authorities '^''♦20,751. issued to Paganini, et ai dis- 

* . ^ • r T * closes a detection method and ^>paratus for a user device or 

ATMs are commonplace and tiicir operation IS familiar to ^^^^^^^ b^nk machine. Paganini, ct al.'s system 

viituaUy the entire population of the United States, and ^ presence of a user so that user instructions may 

elsewhere throughout tiie wcffld. This f amihanty is a majw generated by the ATM *s computer. The present invention 

problem for security. ATMs also make a ten^>ting target f<x ^^^^ I^anini, et aL because it provides for the 

violent criminals, placing their users at risk of robbery and discreet identification and notification of a duress transac- 

violence. Accordingly, there is a need for a system and tion. Paganiiti, et al. makes no provisions for sounding an 

method for preventing the forced withdrawal of cash from ^ alarm or notifying the police of an emergency, 

an ATM or for signalling the authorities of a duress U.S. Pat. Na 4,675,815, issued to Kuroki, et aL discloses 

transaction, that will not endanger the cardholder. a transaction safety system for falsely indicating successful 

There have been attempts to safeguard ATM machineSt completion of illegal transaction. Kuroki, ct aL*s system is 

however, such attempts do not adequately protect the ATM for use with a portable monetary transaction device which is 

victim without alerting the ATM robber. For cxaiiq?le.plac- 3- connected via a telq>hone line to a central processing unit of 

ing a **panic button** on an ATM, although one method of a banking facility. Kuroki, et al.'s system utilizes an SOS 

notifying the police, may also trigger a violent response signal which is entered through a keyboard during the input 

from the criminal. process. The banks processing center then prevents access to 

. ' . * I J J • I • t the costumer*s account and delivers false information thai 

Other known systems for raising a duress signal mvolve ^ ^^^n ^^n successftiL Kuroki, et al. differs 
addmg an extmndigit to an access code, e.g home secunty ^ ^ .^^^^^^^ 
system panic codes, or inserting a strmg of code toat will ^ user's account must be successfuUy entered and trans- 
alert the computer system that a transaction was made under ^^^^ completed in an attempt to avoid physical harm from 
duress. In those instances, a criminal with a con^blc ^ Further, to be successful, the present invention 
knowledge of tiic workings of tfic system would realize that notification of a duress transac- 
an alarm had been given, placing the victim in immediate 43 ^^^^ without tipping off an attentive robber, who is famlHar 
danger of retaliation. Such systems could prove fatal if the ^ith the system. Since accessing an ATM utilizing the 
robber is looking fw any *talse move" on the part of flie invention typicaUy only requires entering a four digit 

number, any entry of anyiing other than a four digit number 

Merely adding an emergency digit to an access code for ^ disastrous. Kuroki, et al.'s system involves numer- 

use in known systems has several problems. This is because 50 ous inputs from a keyboard to complete the transaction and, 

the regular Personal Identification Number (PIN) or access ^ reason, can allow for tfie undetected entry of an SOS 

code in known systems must have some termination point However, the system of Kurt)ki, et al. will not woric if 

If a six digit PIN is the greatest lengtii tiiat a regular PIN can criminal is as familiar witii the system as the public is 

be, Uie felon will recognize that an alarm has been given by xTm systems. Ftrthcr. unlike the inesent invention, 

a seven digit entry. Such a system could theoretically protect 33 Kuroki, aL does not notify or signal the authorities as to 

a number of tiie cardholders, but there would still be a fair ^ ^^^^ ^j^i^g committed, 

number of users at great risk. The fault in die systan is tiiat Accordingly, tiicre is a need for the disoeet identification 

by knowing what the greatest lengtii a PIN could be makes ^ ^ transaction and the discreet notification to 

die extra emergency digit useless. authcmties tiiat a crime is being committed at an ATM 

Basically, any act on the part of die victim other than 60 machine. The present invention solves these problems by 

entering a four-digit PIN (or the usual number of digits if providing a system and metfiod of discrectiy identifying 

oUier than four) wiU result in alerting the criminal that his ^^^^^^ transactions and/or duress access to an ATM 

crime has been repcfftcd. During the course of a robbery, die machine. 

victim is under stress, and needs a sinq)le, hard to forget ' , 

discreet mrthod of alerting tiic poUce. 45 SUMMARY OF THE INVENHON 

There are known systems which arc used for security in The present invention is a system and method for dis- 

various computerized transactions. For exan:q)le. U.S. Pat creetiy identifying and signalling a duress transaction at an 
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Automatic Teller Machine or other coinputerizcd system It is also the object of (he present invention to provide a 

throu^ die use of a Personal Distress Number or PDN for simple, hard-to-forget method of alerting the police during 

short. The PDN is used by an ATM customer to signal both the course of an ATM robbery, while the victim is unda 

banking and law enforcement authorities that the user is stress. 

under duress and to send hdp without alerting the fdon that 5 ft is an additional object of the invention to |W)vide a 
the victim is calling for help. The PDN can be idcntiral in discreetly notifies the poUcc of a duress trans- 
length to that of the Ppf used by the sEmxc ^stem. Thus a ^ transaction to provide time 
PDN could be entered mstcad of a PIN with actions that ^ .TZ^.a 
could not be distinguished from those that are used to enter ™^ ^ respond. 

a PIN by a felon. The actions displayed by the ATM Numffous other advantages and features of the invention 

accepting a PDN could be made indistinguishable from will become readily apparent frcwn the detailed description 

those disjrfayed by an ATM accq>ting a PIN. of the prefored embodiment of the invention, from the 

The system and method of the present invention Is a safe claims, and from the acconq)anying drawings in which like 

and efficient way to make all ATMs the equivalent of a 911 numerals are employed to designate like parts throughout 

emergency line. The system provides a sim{de. certain and the same. 

scoirc way of allowing the customer to alert the poUce that nR^jfTJirrrrnisr nP THP nR AWINGS 

a crime is taking place without alerting the criminal that an BRIEF DESCRIPnON OF THE DRAWINGS* 

alarm has been given. Using the "duress PIN" or PDN ^ understanding of the foregoing may be had by 

number would trigger a silent alarm connected to Ae nearest reference to the accompanying drawings wherein: 

poUoe station initiating a poUce response. FIG. I is a front view of a prior art autotnatic tcUcr 

There are a number of methods by which a PDN may be machine; 

implemented. A first method is what could be described as ' . « ^ rt.- ^^^«t 

uupivwivu pjQ 2 IS a schematic view of the system of the present 

a gcnaal PDN number which could be randomly assigned. * * / r 

A second mediod is what could be described as an altered inventton; 

PIN number. This second mctiiod, a subject of the prcsert ^ FIG. 3 is a schematic view of an alternate embodiment of 

invention, comprises: (1) a typical prestored PIN number the system of the present invenuon; 

prestored in the memory banks of the bank con^Mitcr or on FIG. 4 is a schematic view of an alternate embodiment of 

the magnetic strip of the costumer's card, and (2) an the system of the present invention of FIG. 2; 

algoritfim which may alter the PIN number to achieve a PDN pjQ 5 a flow chart of the system and method of present 

number. The advantages of enq)loying an altered PIN num- ^ invention; 

bcr as a costumcr^s PDN number, rather than a prestored hG. 6 is a flow chart of an alternate embodiment of the 

PDN number, are quickly realized by a bank upgrading an ^ m&^od of the jM^sent invention wherein the 

ATM system to include a distress system. Sudi a bank need ^ ^ variation of the PIN; 

only program the algorithm into the computer system to 7 ^3 ^ ^ed flow chart of the system and 

make the present system operative rather ^an program a LZ^^^^^^Z nf ftg ^- 

separate PDN nunier fw eacA customer and/or reissue 1^^°^ mvention of FIG. 5, 

cards to each customrr identifying flicse new PDN numb<rs. FIG. 8 is an alternate expanded flow Am of the system 

Further, there are various options that the system can take and method of the present mvention of FIG. 5; 

once the PDN has been entered. These will be described in FIG. 9 is a front view of an automatic teller machine in 

mere detail below. 40 present invention; 

The crux of the system Is in coverdy alerting the conqniter fJiQ. 10 is a front view of an alternate automatic teller 

system that the transaction being perfmned is not voluntary. machine in use with the present invention; 

In response, the ATM could either slow down the transaction pjQ u is^ flow chart of another alternate embodiment of 

time, giving police mwe time to respond, limit the funds present invention wherein the PDN is the PIN modified 

available from that person's account so (hat the robba 45 ^ conversion number 

cannot gel away with enormous sums of nwney, or rcjert the nO. U b a flow chart of another alternate embodiment 

transaction with an -unable to con^l«e of the present invention wherein the PDN is part of the 

message, and then, on any subsequentatempts, slow down the PIN in a variable length PIN system; and 

eie transaction. Further, flie entire ATM system could be , . . ^ ^. . 

dertedcityornationwidetothefac*thataf<icedtransaction ^ ^ ^ ^ l^^^Tif S??^^^ 

has occurred. Iff the criminal makes it away from the first of the present mvention whcrem the PIN/PDN mast be 

location and attempts to force another withdrawal, the cntoed befwe receiving funds, 

system could alert the poUce the moment tfiat the card was DETAHJED DESCRIPnON OF THE 

inserted again. Still further, along with the alarai; Ac system DEFERRED EMBODIMENT OF THE PRESENT 

could give a general description of the cardholder for the INVENTION 
police to use, thus avoiding a potential tragedy because of a 

mistaken identity, as well as giving the police an extra edge While the invention is suscep^le of embodiment in many 

in spotting the parties involved. different fcoms. th«c is shown in the drawings and will be 

The most in^>ortant feature of this process of raising an descril>ed herein in detail, a jffcfarcd embodimeot cf the 

alarm is that even thougji the criminal is perfectly familiar 60 invention. It should be understood, however, that the present 

with the system, the alarm can be covertly given right in disclosure is to be considered an exenq)lification of the 

front of him. principles of the invention and is not intended to limit the 

AccOTdingly. it is the principle object of the present spirit and scope of the invention and/w claims of the 

invention to provide a security system for an ATM. embodiment ilhistratcd. 

It is the further object of the Invention to provide a system 63 FIGS. 1 through 13 illustrate the system and method of 
for identifying an involuntary transaction at an ATM and the present invention, as wcU as alternate embodiments, in 

notifying the police. use with an ATM machine 12. such as that illustrated in FIG. 
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1, having a display 14, a keypad 16. a card reader 18, and a The bank*s central processing unit 26b pcrfornis the PDN 

cash dispenscx 20. Function buttons 22 arc further iUustrated validation jffocess, which wiU be described in more detail 

next to dispUy 14. ATM machine 12 further includes com- with rrfcrence to RGS. 5-8 and 11. 

putcr means detecting a PIN number prcstored in the Upon detection that a PDN has been entered, the CPU 

bank computer system (See RG. 2). 5 26^, via a data link 27, will inform the commumcaUon 

. A-ri* w ; A- a™ *w^^n^,»c« on device 28 to contact the appropriate authonUcs. For 

^ T T iTf ^ n example, a telecommunication dialer, via a data Unk 29 

account holder based on fee PIN numbcx. Let A-B<:.D *^ ^ ^ ^ ^ ^^^^ p^y^ department's dis- 

represent any PIN number, where each digjt is unique from ^^^^ center's telephone or computer system 3#. therrfiy 

any other digjt in the PIN. During the recognition phase ai discreetly infonning the police that a duress transaction U 

entering the PIN. the ATM computer recognizes "A-B-C-p" ^ occurring. Communication device 28 can send a prc- 

as the COTect PIN. When an incorrect PIN number is recorded message to the police indicating the location of flie 

entered, the computer recognizes, for example, "A-B-C-ET duress tiransaction and the name of the individual under 

or "A-B-D-C* as incOTect and rejects the request The duress. Rirther, ATM machine Hh is preferably connected 

present invention is generally illustrated by the addition of via a data link 31 to a low light camera 35, which will be 

another step during the recognition process. described in more detail in reference to FIG. 9. 

For example, if a user under duress purposely enters the FIG. 4 illustrates an alternate embodiment of the system 

PIN number in reverse order, i.e., "D-C-B-A", the conqmtcr of the present invention wherein ATM raarfiinc \2J? is 

can be programmed to recognize that the correct PIN was connected dircctiy to the bank's central processing unit 

entered in reverse, or that ihc PDN was entered. Rather than (CPU) M>. ATM machine lib further includes a controller 

reject the PIN as faulty, the con^tcr could then notify the ^ 24 fcff controlling the external devices of the ATM machine, 

nearest police station tiiat the person withdrawing tiie cash The controUer 24 is opCTatively associated with the central 

is under duress. Notification to the authorities can be accom- processing unit 26b via a data link 25. The bank's central 

plished through tiic use of a telejAone dialer witii ptc- processing unit 266 perf»ms the PDN validation process, 

recorded message or a **silent*' alarm, such as an alarm which will be dcsaibcd in more detail with reference to 

system similar to a jewelry store's or a bank's burglar alarm. ^ HGS. 5-8 and 11. 

Police would then have ^•real-time*' notice that a crime is in Upon detection that a PDN has been entered, the CPU 

progress. 262>, via a data link 33, will send an alarm signal with the 

FIGS. 2r^ illustrate the ATM duress system of the p-esent approfffiate infotmatioa, via data Unk 33, to a computer 

invention. The ATM machine of the present invention can ^ console 36 at a remote location. An c^tor 38 monitoring 

take two different fOTms. The ATM machine can have its the computer console 36 will then notify or contact die 

own separate central processing unit, or it could be directiy appn^riate authorities, such as police department 30. 

linked to the bank's central processing unit FIG. 2 iUus- Further, ATM machine 126 is preferably connected via a 

trates ATM machine Via having its own central processing data link 31 to a low light camera 35, which wtil be 

unit (CPU) 26fl. ATM madunc 12a further includes a 3^ described in mcarc detail in reference to FIG. 9. 

controller 24 for controlling ttic external devices of the ATM Referring now in particular to HG. 5, the general PDN 

machine, and a communication device 28 sudi as a tele- system and mc&od of tiie present invention 10 is illustrated, 

phone dialer witii a prerecorded message. The controUer 24 This m^^od is acoompUshed by adding to the Customer's 

is operativcly associated with the central processing unit 26a Information Klc in ttie ATM system, an additional "duress 

via a data link 25. The ATM central processing unit 26fl ^ PDT number or PDN. (A Customer's Information File is the 

performs Uie PDN validation process, which will be file which keeps the information relevant to an individual 

described in more detail witii reference to FIGS. SS and 11. costumer's accounts at toe bank where he does business.) 

Upon detection tiiat a PDN has been entered, the CPU The PDN would be a number randomly chosen by tiie 

26a, via a data link 27, wiU Inform the communication customa, so that it would be easfly remembered by the 

device 28 to contact tiie appropriate autiiOTities. For 45 customer and not confused by tiie customer witii tiiat cus- 

examplc, a telecommunication dialer, via a data link 29 tomers regular PIN. For exan^le, if tiie costumer's regular 

(phone line, etc.) will contact tiie poUce department's dis- PIN is tiic date of that costumer's birtiiday. tiie PDN could 

patch center's telei^ione or computer system 30, tficreby be tiie date <rf a relative's birthday, such as a spouse. This 

discreetiy informing tiie poHce tiiat a duress transaction is would aUow tiic cust<Hncr to remember botii tiic PIN and tiie 

occurring. Communication device 28 can send a pre- 50 PDN and not get tiie two mixed up. 

recorded message to the police indicating ttie location of tiie The PDN generally could take any frara, eidia a siii^)le 

duress transaction and tiie name of tiie individual under reversal of tiie namal PIN, e.g., 1234 would become 4321 

duress. By use of a physical description of tiie rightful (see FIG. 2), a second number tiiai is farmliar to ttic 

cardholdff encoded on tiie magnetic strip on tiie ATM card, cardholder, e.g„ the last four digits of his home phone 

tiie ATM con^tcr could abo send a description of tiie 33 number might be ttie normal PIN and his work number ttie 

victim to tiie police, tiius assisting in ttic identification of tiie PDN. The only rcquirancnts for sdecting tfie PDN is that 

victim and tficreby tiie lobbcr. Fiirtiier, ATM machine 12a is tiic PDN number is not one tiiat tiie victim wfll forget under 

preferably cormected via a data link 31 to a low tight camera stress nor enter by mistake when tticre is no duress. 

35, which will be described in more detail in reference to A person could either select his own PDN in the same 

FIG. 9. 60 manner as he selects a PIN. or he could use his PIN as a 

FIG. 3 illustrates ATM machine 126 being connected reference fcff choosing ttie PDN, fw cxan^ile, 5329 could be 

directiy to tiie bank's central processing unit (CPU) 26b. 6430, by adding I to cadi digU in tiic PIN (sec HO. 12). 

ATM machine lib furtticx includes a controUer 24 for There arc otiier matticrttatical permutations ttiat could be 

controlling tiie external devices of tiie ATM machine, and a performed on a PIN to create a PDN, however tiie basic 

communication device 28 such as a telejAone dialer witfi a 65 metiiod of an alternate PIN being used as a PDN rcmams. 

prerecorded message. The controller 24 is opcratively asso- The system and mettiod of ttie jyesent invention works as 

dated witti ttic central processing unit 266 via a data link 25. follows. A customer after arriving a: an ATM machine first 
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enters a PIN Dumber using the kcyt>oard, geacraUy indicated 
as stq) St. The coxi^>uter means then attenqits to verify the 
fW number at step 55. If the number entered was the 
costumer's coircct FIN number, the transaction proceeds as 
usual, step 60. 

Upon failure of the entered access number, the processor 
would be instructed to set a flag indicating a failed access 
number and atten^ to verify the number as the customers 
PDN number, step 65. If the ATM processor verifies the 
entered access number as the customers PDN and the access 
flag is set then the processor would be instructed to send a 
signal to alert the authorities, step 70, and then continue 
processing the transaction. If the proccssoi^ does not verify 
the entered number as either the PIN <x PDN. then the ATM 
processor will continue with ordinary failed access number 
procedures, step 80. 

Certain limitations may be placed on the selection of a 
PDN. For cMnq)le, 9369 might be too close to 9639 or 2458 
would be too dose Co 425 S< to avoid false alarms. If 
accidentally switching two adjacent numbers would result in 
a false alarm, the FIN/PDN combination might be unaccept- 
able. Technically it could also work, but given the occur- 
rence of dyslexia in the population, this could be a problenL 

By assigning a second PIN. a Personal Distress Number 
or PDN, to a cardholder, the problcnas associated with ATM 
security and alarms would be solved. Even with a gun in the 
victim's back, the cximioal would not know whether the 
normal PIN had been given or the PDN. Once the PDN had 
been given, the computer system, using an alarm system 
similar to a jewelry store's or a bank's burglar alarm, could 
immediately alert the nearest police station that a robbery 
was In progress which would dispatch police to the scene, 
providing a ^Yeal-time" response to the crime. 

Conceivably, one PDN could be assigned to all of the 
customers of a given bank or ATM system. However, this 
would run the risk of the victim/cardholder forgetting &e 
PDN or the criminal learning what the PDN for a certain 
bank is. In cither instance, the victim would be in trouble. 

FIG. 6 illustrates an alternate embodiment or variation of 
the present invention, wherein the PDN is comprised of the 
same digits of the cust<«aers FIN, but entered in a different 
order. FIG. 2 illustrates bow to expand the system to indude 
reflexive and other variations. However, the preferred varia- 
tion of the PIN number to be used as a PDN number is the 
reverse PIN. 

The method illustrated in FIG. 2 works by changing the 
sequence of the PIN digits by the ATM user in a prearranged 
manner according to at least one prestored algorithnL For 
example, if a FIN number's digits are represented by the 
letters A-B-C-D, a related PDN would be rqocsented by 
D-C-B-A, the reverse of A-B-C-D according to a first 
prestored algorithm. The processor which is making the PIN 
verificatloo would be instructed to do the following: When 
a customer arrives at the ATM and enters an access number 
to attempt to use the ATM, step 50. the con^Hiter means or 
processor of the ATM attempts to voify the FIN number at 
stq) 55. If the number entered was the costumer's coma 
FIN oumba. the transaction proceeds as usual, step 60. 

Upon failure of the entered access number, the processor 
would be instructed to set a flag indicating a failed access 
number and attempts to verify the entered access number as 
the PDN by reversing the change in the sequence according 
to the first prestored alg<sithm (i.e., convert D-C-B-A to 
A-B<:.D), step 65. If the processor verifies the modified 
access number as the customers PDN and the access failure 
flag is set, then the processor would be instructed to send a 
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signal to alot the authorities, step 70, and continue process- 
ing the transaction. 

Upon faihire to verify the entered access number as a 
reverse FIN, the proqessor would be instructed to attempt to 

5 verify the entered access number as the PDN by dianging 
the sequence by reading the last (fourth) digit first and then 
the fir^ second^ and third according to a second prestored 
algcHidmi (i.e.. convert B-C-D-A to A-B-C-D). step 66. If 
the processor verifies the modified access number as the 

to customers PDN and the access failure flag is set, then the 
processor would be instructed to send a signal to alert the 
authorities, stq> 71, and continue processing the transaction. 

Upon failure to verify the entered access number by 
reading the last digit first, the processor would be instructed 
to attend to verify the entered access nimibcr as the PDN 
by changing the sequence by reversing the first two digits 
and reversing the second two digits according to a third 
prestored algorithm (Le., convert B-A-D-C to A-B-C-D), 
step 67. If the processor verifies the modified access number 

^ as the customers PDN and the access failure flag is set, then 
the processor would be instructed to send a signal to alert the 
authorities, step 72, and continue {S'ocessing the transaction. 

Upon failure to verify the entered access number by 
reversing both the first two and reversing the second two 

^ digits, the processor would be instructed to attempt to verify 
the entered access number as the PDN by dianging the 
sequence by reversing the first two digits with the second 
two digits according to a fourth prestored algorithm (Le., 
convert C-D-A-B to A-B-C-D), step 68w If the processor 

^ verifies the modified access number as the customers PDN 
and the access failure flag is set. then the processor would be 
instructed to send a signal to alert the authmtics, step 73. 
and continue fvocessing the transaction. 

If the processor does not verify the new modified access 
number as a PDN, then continue with ordinary failed access 
number procedures, step 80. 

Fci a variety of reasons, the reverse PIN is the best 
possible choice f ot a duress PIN ot PDN. What is important 

^ is coming up with a metibod that will allow die user to call 
for help while under great stress, that will not alert the robber 
that help has been notified and that will not be acddentally 
entered by a person not under duress. Having two FIN 
numbers, one regular and one duress, would theoretically be 
just as effective, provided that the person didn't forget what 
the duress FIN was. Changing the order in other ways would 
also work, e.g., C-D-B-A or D-A-B-C In practice, a PDN 
that was inversive or reflexive would also be acceptable. For 
example, FIN 1-2-2-1 would become PDN 2-1-1-2. 

5Q F uithei m oi 'e, all of these variations could also be added to 
the same system that uses a reverse PIN system. 

It should be understood that other variations arc also 
possible. The computer could run through any number of 
variations as desired. It should also be understood that tttc 

3j ATM processor could be limited to one or a number of the 
above variations or other variations. 

FIG. 7 illustrates an expanded flow chart of FIG. 5. After 
an access number has been entered, step 50, and a PDN 
verified, step 65, the silent alarm or distress call is triggered, 

60 step 70. The system can take various actions. 

F(j^ exanq>le, the whole transaction could be slowed 
down, step 90, i.c., the entire transaction process could be 
delayed such that the system takes longer to dispense the 
cash. In this manner, the notified autbcHities wiH have more 

65 time to respond to the distress signaL The slowed transaction 
could take several forms. The system could at first refuse the 
request and give out a fake "out of service** message ot 
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*^mjr— Please try again** message. The customer would 
have to rcstait the transaction. FYeferably, the system would 
merely stall for time by slowing down the generatioD user 
instruction screeos and then giving a *T)ran$action in 
Progress** message. Ultimately, the system should dispense 
cash (that would be debited to the person's account or not, 
dependiog). so that the robber does not become agitated and 
harm the victim. 

FIG. 8 illustrates another alternate expanded flow chart of 
FIG. 5. After the alarm has been triggered, step 70. the 
conq>utcr could automatically limit the funds available to be 
dispensed, step 95. If, for example, more dian $50.00 is 
requested to be withdrawn, the system could {Mrovide a 
message stating "Your Request Exceeds the Maximum 
Allowable Withdrawal at this Madune". Because most ATM 
cards have a $500 daily limit and a maximum (tf $300 from 
any single ATM tcnninal. a refinement of this idea would 
involve alerting the entire ATM network that the cardholder 
is under duress. If the card is inserted into a second ATM. the 
second ATM would instantly alert the police, without wait- 
ing for tiic duress PIN being entered. If the police arcn*t fast 
enough to the scene of the first withdrawal, they will have 
a few extra seconds to respond to the second ATM alarm. 

It should be understood that after the alarm has been 
triggered, the ATM system could do one or more of the st^s 
aiustratcd in FIGS. 7 and 8. 

For example, a bank could install equipment to record 
occurrences in proximity to the ATM naachine. FIG. 9 
illustrates an ATM machine having a low light level camera 
or Wdeorecordcr 96 to photograph or videotape the area 
immediately surrounding the ATM machine to c^ture the 
crimioal on film. Camera 96 could be activated upon the 
identification of a PDN. Similarly. FIG. 10 illustrates an 
ATM machine having a miaophone 98 to record voices for 
later identification. When a PDN is entered, this microphone 
could be activated to record any sounds or voices, as an 
additional step to be performed after step 70. 

As is fuxthcr seen in FIGS. 9 and 10. ATM machines 12 
include an alpha-numeric keypad 16a. Accordingly, the 
system and method of the present invention is also appli- 
cable to an alpha-numeric system. That is. the PIN or access 
code could include the use of words or letters in addition to, 
or in place of numbers only. For exan^le. the access code or 
PIN for a customer might be "AARDVARK". while the 
duress code or PDN could be •■XYLOPHONEr. 

FIG. 11 illustrates an alternate embodiment or variation of 
the general PDN system and method of die present invention 
10. This method is accon^lished by storing in the Custom- 
er's Information File in the ATM systent a conversion 
number, which when combined with the ATM user's PDN 
will yield the Customer's PIN. 

Upon failure of the entered access number, the fn-ocessor 
would be instructed to set a flag indicating a faUed access 
number and combine the oonvcision number with the 
entered access number, and try to verify the number entered 
as the PIN number again, step 100. If combining &e entered 
number with the conversion number results in a PIN match, 
then the entered number is verified as the customers PDN, 
step 65, and the PIN failure flag is set. The processor is 
instructed to nc^ify authorities to the fact that a customer has 
entered their distress number, step 70. and continue process- 
ing the transaction. If the processor does not verify the new 
modified access number, then the computer will continue 
with ordinary failed access number procedures, step 80. 

For exanq)le. let A-B-C-D represent a four digit prcstored 
FIN number and let X-X-X-X represent the conversion 
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ntmiber, wherein X represents any number encompassed in 
one of the prestored algorithms (positive or negative). When 
a user enters an access number of (A+X>-(B+XHC+X)-(I>f 
X), the ATM's computer simply adds the access number to 

s the conversion number according to the prcstored algorithnL 
If this modified access nuinber is then equal to the PIN 
number, the alarm will sound. Therefore, if a user's PIN is 
4567 and the conversion niunber is IIU. when the user 
enters 3456 (the PDN), 3456 and 1111 will be combined to 

10 arrive at 4567 and the alarm will sound. Similarly, if a user's 
PIN is 4567 and the convenion number is (-1) (-1) (-1) 
(-1), when the user enters 5678 (fee PDN). 5678 and (-1) 
(-1) (-1) will be combined to arrive at 4567 and die 
alarm will sound. 

IS Again, what is most important about this idea is that it is 
easily memorized, will be usefiil imder stress, will not result 
in false alarms and will not alert the robber that an alarm has 
been given. The ATM's communication device would send 
out an emergency signal for police help. 

^ Also of great importance is the ease with which the 
system of the p-esent invention may be added to a typical 
ATM system and thereafter maintained. Tht algoridmis 
associated with this system need only be incorporated into 
the banks computers. The bank need not program and 

^ maintain a sq>arate prcstored PDN number into the banks 
computers for each account to which access is provided via 
an ATM. Furthermore, the bank is not required to manufac- 
ture new cards for each such account or reprogram old cards 
to include a PDN number thereon. Accordingly, the costs of 

^ implementing and maintaimng the system of the present 
invention are a mere fraction of the costs of prior ait 
systems. 

FIG. 12 illustrates anotha alternate embodiment of the 
present invention which solves the jB-oblem of adding an 
emergency digit to a set numbo* of digits PIN system (for 
example four digit PIN systems), which could alert the 
rc^^bcr and result in harm to the victim. This embodiment of 
the present invention comprises issuing FIN numbers of a 
random number of digits, such as three, four, five or six 
^ digits. Different customers would have a different number of 
digits in their PIN. Accwdingly. the use of a PDN having an 
extra digit or a dropped digit would safely trigger the alarm 
without letting the robber know diat the authorities have 
been signaled. 

For example, if the bank issues various length PIN 
numbers to its customers (sudi as dure, four. five, six, or 
seven digits, etc.) a victim, whose normal PIN is for example 
five digits, could enter a sixth digit thus triggering die 
alarm- Similariy, with this embodiment of the invention, a 
customer could use a shorter PDN than his PIN by dropping 
the first or the last digit Additionally, the PIN and the PDN 
could be the same length by dropjnng the first digit and 
adding an extra digit 
33 The variable length PIN embodiment of the present 
invention is illustrated in the flow chart of FIG. 12. wherein 
ABCDE r^esents. by way of exan^)le only, a costumer's 
variable lengfli PIN and X represents any extra digit. 

Accordingly, the customer first enters a variable length 
60 access number to attempt to use the ATM. ^ep 150. The 
computer means or processor of the ATM then attempts to 
verify the number as die costumer's variable length PIN 
(ABCDE) at step 155. If the number entered was the 
costumer's correct FIN number, the transaction (Hoceeds as 
6S usual^ step 160. 

Upon faDure of the entered access number, the processor 
would be instructed to set a flag indicating a failed access 
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number and attempt to verify the entered access number as as the user's PIN, step 255. If die user's ooirect PW was not 

the PDN by recognizing the access number as the PIN plus entered, the conqMiter means attcn^ts to verify the access 

X, LC,. ABCDEX., step 165. If the processor verifies die number as die user's PDN, step 2(S. If the user's PDN was 

access number as die customers PDN and die access faUure entered, the communication device in die ATM would notify 

flag is set tticn the jwoccssor would be instructed to send a 5 die ^jprojHiate audioiitics, step 270, and dien proceed widi 

signal to alfft die audiorities, step 170, and continue pro- die transaction. If ncittier die PIN or die PDN have been 

ccssing die transaction. entered, the ATM will reject the transaction, step 2«0. 

Upon failure to verify the entered access number as toe If the user entered the coiTCCt PIN, then the ATM trans- 

PIN plus X. tiic processor would be instructed to attenqjt to action would proceed as usual, step 260, However, after die 

verify die entered access number as die PDN by recognizing »o user has entered die amount of cash to be received, the ATM 

die entered access number as die PIN minus die last digit or will require the user to re-enter die PIN number before 

ABCD. step 166. If die proccsscr verifies die access number receiving die cash, step 290. Accordingly, should a robber 

as die customers PDN and the access failure flag is set dien approach the user after initially entering die correct PIN, or 

die processor would be instructed to send a signal to alert die at step 260. die user can stiU discrceUy notify dw audiorities. 

audiorities. step 171. and continue processing die transac- 15 ^p^^ f^Qog prompted to re-enter the PIN number at step 

don. 290, the user has die option of entering eiUier the PIN or die 

Upon failure to verify the entered access number as die pDN. When flic user enters a number, die computer means 

FIN minus die last digit the j^occssor would be instructed attempts to verify die entered number as die user's correct 

to attempt to verify die entered access number as die PDN PIN, step 292. If the correct PIN has been entered, die user 
by recognizing die access number as die PIN minus die first ^ will receive die funds, step 294. If the correct PIN has not 

digit BCDE, step 167. If die processor verifies die access been entered, die conqiuter means will attempt to verify die 

number as the customers PDN and the access failure flag is entered numba: as the user's PDN. step 296. If die user has 

set, dien die processor would be instructed to send a signal entered die PDN at step 290, die communicatioa device of 

to alert die audiorities, step 172. and continue processing die the PDN will notify the appropriate audiorities, step 270. If 
transaction. ^ neither die PIN or PDN have been entered at step 290. die 

Upon faOure to verify die entered access number as die ATM will provide an error message and jffompt die user to 

PIN minus die fir^t digit die processor would be instructed re-enta die number fw verification. If die entered number is 

to attempt to verify die entered access number as the PDN unable to be verified after a certain number of tnes, diree for 

by recognizing die access number as die PIN minus die first example, die ATM would at dus point rejea die transaction, 
digit plus X, Le., BCDEX, step 168. If die processor vwifies ^ Invention 210 iMX)vidcs die user an additional chance to 

die access number as the customers PDN and die access discreetly identify a duress transaction and notify die appro- 

faUure flag is set, dien die processor would be instructed to priate audiOTTty. By requiring uscts to re-enter dieir PIN 

send a signal to alot die audiorities, step 175, and continue number just prior to receiving funds, step 290. die user has 

processing die transaction. two opportunities to discreedy notify die audiorities of a 

If die processor docs not verify die access number as a duress transaction. Therefore, die user can discreedy and 

PDN tiien it will continue widi ordinary failed access safely notify die police of a distress transaction at any time 

number procedures, step 180. during ATM transaction. 

In general, die PIN could be N digits in lengdi and die The system and mediod of die present invenUon is also 
PDN could be eidier N-1. N, or N+1 digits. By expanding 40 very uscftd should a criminal take a victors AFMcard and 

die range of PIN lengdis, die PDN lengdi could also be force die victim to tcU die cnmmal die PIN number. If tius 

shortened or lengdicned as required There is no requirement were to occur, die criminal could dien commit die oime a 

diat die extra digit be spedflcaUy designated. That is, any short time later widiout die victim bemg there, while an 

digit in die N+I position could be used to trigger die alarm accompUce stays wldi die victim until verification by die 

3cm. All die customer has to know is to press any extra 45 criminal of ill-gotten funds. For die system iMdi^to 

(Ujrit he wants to. Similariy, die customer could choose to work, die victim only needs to tcU the cnmmal die PDN 

omit die first or last digit of dieir PIN. The computer will number instead of the PIN numbo; and die criminal would 

-recognize*^ eidicr diat part of die correct sequence was effectively caU me police hinisclf. Then if die AIM iiiachmc, 

given, but not aU of it or diat die entire i^oper sequence was after having had die PDN entered, slows down die 

5vcn plus an extra digit and die alarm will be triggered So 50 transaction, die police will have added time to arrive and 

long as enough of die sequence is entered die con^ter aRwehcod die crimmal. 

could recognize the identity of the user, and the difference FUrdicr, the system and mcdiod of the present invention 

between die PIN and die PDN would not be noticeable or tip could incorporate voice recognition devices, similar to diose 

off die criminal because die PINs would be variable Icngdt used in sophisticated telqAone answering systems, to be 

HO 13 iUustrates anodier alternate embodiment of die 55 used along widi or in place of die ATM's keypad In Ais 

present invention which aUows discreet identification and case, die uscr^s card wiU be used to imtiate the ATM 

nodficatioo of a duress transaction which may arise during transaction, dien die voice recognition device will aUow 

or in die midst of an ATM transaction, radier dian before or access to die system. After die user inserts die ATM card die 

at die start of die transaction. If a robber were to ^>proach user would tiien speak a passwori into a mioophone. This 

an ATM user aftff die user has entered die caiect FIN 60 password would take die place of a PIN number. Simil^ly, 

number dial user would have no way of notifying die p<^cc. die user wiU have a distress password which would workm 

Accoidingiy, die present invention 210 of FIG. 13 solves die same manner as die PDN of die present mvention. 

dds problem by requiring all users to re-enter tiicir PIN/PDN By way of illustration, steps 50, 55, and ^ of FIGS. 5, 7 

number just prior to receiving funds. or 8 would be achieved via die microphone and voice 

Accordingly, a user approaches an ATM machine and 63 recognition device, ladier dian die keypad and computer 

enters an access number, step 250. The computer means of means. The voice recognition device would recognize 

die ATM machine dicn attempts to verify die entered numbo* human speech. attcnqH to identify die speaker, attempt to 
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identify the password attempt to identify the distress pass- 
word if the user's nonnai password is not identified, and 
then trigger Che silent alarm if the distress password is 
identified. 

The embodiments of the present invention disclosed 
herein have numerous benefits and advantages, as stated 
above. Furthermore, because the cardholder has been imme- 
diately identified by the computer upon the triggering of the 
alarm, the police will know who is in trouble, what that 
person looks like, what kind of car they drive, etc. The 
benefits to the police would noean, in some cases, the 
difference between life and death. 

This idea has applications that go beyond simple ATMs. 
Virtually any situation where computer access to valuable 
property or information is regularly used could make use of 
diis system. For exan^le keyless auto entry systems such as 
die system Ford Motors uses for its cars, could incorporate 
the system and method of the present invention. The car*s 
cellular phone could be linked to the entry system, where- 
upon detection of a n>N by the central processing unit of the 
car's entiy system ooidd instruct the telephone dialer having 
a pre-recorded message to discreetly notify the police. The 
car's location could be identified by a niunber of available 
car tracldng systems. 

The PDN idea can also be used in systems where access 
to a system is initiated by means other than an ATM card. 
For example, telephone credit card calls are initiated by 
entering **0''+the called number+the caller's telephone 
numbcr'Khe caller's FIN. Access to an ATM could be 
initiated in the same manner. A customer could aj^oach an 
ATM, enter his phone number {or an assigned nmiibcr>+PIN 
and conduct the transaction. In this case, substituting a PDN 
for a FIN would serve the same purpose as the PDN in a 
bank card system. 

In fact a wco-ldwide network of ATMs could function on 
such a system. For example, an American tourist in 
Hamburg. Gennany could log onto an ATM by entering his 
(country code)4<telephone number) (PIN/PDN) to initiate 
die transaction. For instance, the customer in Hamburg 
enters his access number [Oil (country code)]+( 81 52243312 
(telephone number)l+{1234 or 4321 (PIN/PDN)]. The only 
requirement of such a system might be that the PIN and PDN 
be significantly different from the PIN and PDN of a similar 
telephone number of the same countiy to avoid false alarms 
by an inadvertent switching of digits in the country code, the 
telephone number, or the PIN/PDN. 

The system need not be based directly on the telephone 
number system. The system could be based on its own 
assigned numbers that arc independent of the telephone 
number system. Other methods of accessing are also pos- 
sible. Whether the initial access to the computer system is by 
means of a standard ATM card, voice recognition, retina 
scan, or any otho* means, it is the addition of the PDN that 
makes the system functional. Accessing an account could 
also be made by use of an alpha-numeric keypad and an 
alpha-numeric access codefPIN/PDN. Because die ccffrect 
PIN is unknown to the criminat the victim can enter the 
PDN instead of the PIN, thus summoning the police. 

It is to be understood that the embodiments herein 
described are merely illustrative of the principles of the 
present invention. Various modifications may be made by 
those skilled in the ait without departing from the spirit or 
scope of the claims whidi follow. 

What is claimed is: 

1. An improved system for identifying a duress transac- 
tion at a remote cransactioa teiminal of an automated bank- 
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ing system having a display, a keypad, a card reader for 
reading a banking card, a cash dispenser, and conq)uter 
means for detecting an access number, said system com- 
prising: 

^ means for checking said access number with a personal 
identification number which is prestored on one of said 
system and said banking card; 

whereby said system [nxx^eeds to allow a transaction if 
said access number is the same as said prestored 
personal identification number; 

means for facilitating recall of a non-prestoxed personal 
distress number, said means for fadlitating recall 
including means for storing at least one algoithmic 
function for noodifying one of said prestored personal 
identification number and said access number; 

means fo^ verifying said access number as said non- 
prcstored personal distress number by verifying one of 
an algcmthmicaily modified access number as being the 
same as said prestored personal identification 
number, and 

an algorithmically modified prestored personal identi- 
fication number as being the same as said access 
number; and 

22 means for discreet identification and notification of said 
duress transaction upon verification of said access 
number as being said non-prestored personal distress 
number; 

whereby said system facilitates the recall of said non- 

prestored personal distress number. 
Z. The system of daim 1. further comprising: 
oon^uter initiated means for unnoticeably slowing down 
said distress transaction upon discreet identification 
and notification of said duress transaction by said 
35 means f(x discreet identification and notification. 

3. The system of claim 1. further oon^sing: 

means ftH* limitiDg funds available to be dispensed by said 
cash dispenser upon discreet identification and notifi- 
cation of said duress transaction by said means for 
40 discreet identification and notification. 

4. The system of claim 1, further comprising: 

means for recording occurrences in proximity to said 
remote transaction terminal upon discreet identification 
and notification of said duress transaction by said 
45 means for discreet identification and notification. 

5. The system of claim 1, wherein said personal identi- 
fication number comprises a plurality of digits, and said 
non-prestored personal distress number comprises a second 
plurality of digits differing in number firom said first plurality 

50 of digits. 

6. The system of claim 1. wherein said personal identi- 
fication number comprises a sequence of digits, and said 
non-prestored personal distress number conqirises a varia- 
tion of said sequence of said digits. 

55 7. The system of claim 1. wherein said pcnonal identi- 
fication nimiber comprises a first set of digits, and said 
non-prestored personal distress number comprises a second 
set of digits equal to said first set of digits modified by a 
personal distress conversion niunbcr. 

60 8. The system of claim 1, wherein said personal identi- 
fication number comprises a first set of digits of random 
length, and said non-prestored personal distress Dimiber 
coix$)rises a second set of digits equal to said first set of 
digits plus an additional digit 

63 9. The system of claim 1, whaeln said personal identi- 
fication number ccHnpiises a first set of digits of random 
length, and said non-prestoced personal distress number 
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oompdses a second set d digits equal to said first set cf 
digits minus a digit, 

10. The system of claim 1. wherein said means for 
identification and notification includes a silent alann. 

11. The system of claim 1, wherein said at least one 3 
algorithmic functioo conq)rises a plurality of algorithmic 
functions. 

12. An improved system for identiiying a duress transac- 
tion at a remote transaction terminal of an automated bank- 
ing system having a display, a card reader for reading a 
banJdng card having a personal access password stored 
thereon, and a cash dispenser, said system comprising: 

voice recognition means for detecting human speech; 

means for checking said human speech with a personal 
access password which is preslored on one of said jj 
system and said banking card; 

whereby said system proceeds to allow a transactioa if 
said human speech is the same as said js^estored per- 
sonal access password; 

means for facilitating recall of a non-prcstorcd personal 20 
distress password, said means for fa ci litat in g recall 
including means for storing at least one logical step for 
modifying one of said prestored personal access pass- 
word and said human speech according to said at least 
one logical step; 25 

means for verifying said human speech as said non- 
prestored personal distress password by verifying chic 
of 

said human speech as modified by said at least one 

logical step being the same as said prestored pasonal 30 

access password, and 
said prestored personal access password as modified by 

said at least one logical step bdng the same as said 

human speech; and 
means for discreet identification and notification of said 35 
duress transaction upon verification of said human 
speech as said non-prestorcd personal distress pass- 
w<^d; 

whereby said system facilitates the recall of said non- 

prestored personal distress passwwA ^ 
13. An improved method for the identification and noti- 
fication of a duress transaction at a remote transaction 
terminal of an automated banking system having a display, 
a keypad, a card reader for reading a banking card, a cash 
dispenser* and con^tcr means for processing a banking ^5 
transaction, said method conq>rising die steps of: 
storing a personal identification number in one of said 

computer means and said banking card; 
providing a means for checking said personal identifica- 
tion number in said computer means; 
providing a means for storing at least one algorithmic 
function; 

facilitating recall of said noD-prcstored personal distress 
nunlber; 

entering an access number via said keypad into said 
terminal to begin a transaction; 

verifying said access number as said personal identifica- 
tion numbtf whereby said mediod proceeds to allow a 
banking transaction upoD verification of said access gQ 
number as said personal identification nimiber; 

providing a means for modifying one ctf said personal 
idoitification number and said access number accord- 
ing to said at least one algorithmic functioo; 

providing a means fcr verifying said access number as 65 
said non-prestorcd personal distress number by verify- 
ing one of 
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an algcdthmically modified access number as being the 

same as said personal Identiflcadon number, and; 
an algorithmically modified personal identification 
number as being the same as said access number; and 
triggering a duress signal upon successful recognition of 
said access number as being said non-prestored per- 
sonal distress number; 
whereby said method facilitates recall of said non- 
prestorcd personal distress number. 

14. The method of claim 13, further comprising the step 

delaying transaction time of said remote terminal upon 
said triggering of said duress signal. 

15. The mcdiod of claim 13, further comprising the step 
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of: 

limiting the funds available to be dispensed by the cash 
dispenser upon said triggering of said duress signal. 

16. The method of claim 13, further conqmsing the step 

of: 

reccrdiDg occurrences io proximity to said remote trans- 
action terminal upon said triggering of said duress 
signal. 

17. An improved method for the identification and noti- 
ficatioo (rf a duress transaction at a remote transaction 
terminal of an automated banking system having a di^lay, 
a keypad, a card reader for reading a banking card, a cash 
dispenser, and computer means for processing a banking 
transaction, said method comprising the steps of: 

storing a personal identification number in one of said 

coii^Miter means and said banking card; 
providing a means for checking said personal identifica- 
tion number in said computer means; 
providing a means for storing at least one algorithmic 

function means; 
facilitating recall of said non-prestored personal distress 
number; 

entering an access number comprising a sequence of 
digits via said keypad into said terminal to begin a 
transaction; 

verifying said access number as said personal identifica- 
tion number whereby said method proceeds to allow a 
transaction If said access number is the same as said 
personal identification number; 
providing a means fof modifying one ot said personal 
identification number and said access ntunber accord- 
ing to said algorithmic function; 
atten^ting to recognize said access number as being said 
personal identification number modified into said non- 
prestored personal distress number by varying the 
sequence of said access number digits to equate said 
access number to said personal identification number 
upon failure to verify said access number as said 
non-prestored personal distress number; 
triggering a duress signal upon successful verification of 
said access number as being the same as said qchi- 
prestored personal distress nimibcn 
whereby said method facilitates recall of said non- 
prestored personal distress numba. 

18. The method of claim 17, wherein said step of attempt- 
ing to verify said access number as being said personal 
identification number modified into said non-prestored per- 
sonal distress number by varying the sequence of said access 
number digits is repeated a predetermined number of times. 

19. The method of claim 17, further comprising the step 
of: 
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delaying transaction tiinc of said remote terminal upon 
sdd triggering of said duress signal 

20. The method of claim 17, iurther comfnislng the step 
f: 

limiting the funds available to be dispensed by the cash ^ 
dispenser upon said triggering of said duress signal 

21. The method of claim 17, further comprising the stq>s 
of: 

proceeding with said banking transaction upon successful 
verification of said personal identification number. 

entering a verification numba before receiving banking 
funds; 

atten^ting to verify said verification number as said 
pcnonal idcntificatioQ number; 15 

attenuating to vedfy said verification number as being said 
personal identification number modified into said non- 
prestored personal distress number upon failure to 
verify said verification number as said personal iden- 
tification number; and 20 

triggering a duress signal upon successful verification of 
said non-psestored personal distress number. 

22. An improved method for the identification and noti- 
fication of a duress transaction at a remote transaction 
terminal of an automated banking system having a display, ^ 
a keypad, a card reader for reading a banking card, a cash 
dispenser, and computer means for processing a banking 
transaction, said method comprising the steps of: 

storing a personal identification number in one of said 
computer means and said banking card; 

providing a means for verifying said personal identifica- 
tion number in said computer means; 

facilitating recall of a non-prestored personal distress 
number; 33 

entering an access number via said keypad into said 
terminal to begin a transaction whereby said m^od 
proceeds to allow a banking transaction if said access 
number is the same as said personal identification 
number; 40 

atteir^tiag to verify said access number as said personal 
identification numbo^; 

providing a means for storing at least one personal 
distress conversion number; 

providing a means for modifying one of said personal 
identification number and said access number accord- 
ing to said at least one pcnonal distress conversion 
number; 

providing a logical conversion means for recogidzing said ^ 
access number as being said personal identification 
number modified by said pied^ermined personal dis- 
tress conversion number into said non-prestored pa- 
sonal distress number; and 

triggering a duress signal upon verification of said access ^ 
number as being said personal identification number 
modified by said predetermined personal distress con- 
version number into said non-prestored personal dis- 
tress number; 

whereby said method facilitates recall of said non- 
in-estored personal distress number. 

23. The method of claim 22. furtho^ con^sing the step 
of: 

delaying transaction time of said remote terminal upon 
said triggering of said duress signal 65 

24. The method of claim 22. further comprising the step 
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limiting the funds available to t>e dispensed by the cash 
dispenser upon said triggering of said duress signal. 

25. An in^uroved system for the discreet identification and 
notification of a duress transaction at a remote transaction 
terminal of an automated banking system i^n the entaing 
of a non-prestored emergency number, said remote transac- 
tion terminal having a di^lay. a card reader for reading a 
banking card, a cash dispenser, con^uter means for pro- 
cessing a banking transaction, and means for verifying a 
personal identification number of a first set of digits having 
a last digit wherein said personal identification number is 
prestored on one of said system and said banking card, said 
improved system con^srising: 

means for checking an entered access number of a second 
set of digits with said personal identification number of 
said first set of digits; 

whereby said system proceeds to allow a banking trans- 
action if said entered access number is the same as said 
{Hestorcd personal identification numt>en 

algorithmic function means for recognizing said entered 
access number of a second set of digits as being said 
personal identification niunber modified into said non- 
prestoied emergency number when said entered access 
number corresponds to said personal identification 
number accordhig to at least one algorithmic function, 
said at least one algorithmic function modifying one of 
said personal identification numt>er and said entered 
access number in at least one of the following manners, 

(a) said second set of digits of said access number 
match said first set of digits of said personal identi- 
fication number in any varying sequence. 

(b) said second set of digits of said access number equal 
said first set of digits of said personal identification 
number minus at least said last digit, 

(c) said second set of digits of said access number equal 
said first set of digits of said personal identification 
number plus at least an additional digit. 

(d) said second set of digits of said access number equal 
said first set of digits of said personal identification 
number plus a predetennined offset nimiber, and 

means for discreet notification oi said duress transaction 
upon recognition of said non-prestored emergency 
number by said means for recognizing; 

whereby said system facilitates recall of said non- 
prestored emergency number 

26. The system of claim 25, wherein said varying 
sequence is defined as said first set of digits being repre- 
sented by the letter sequence A B C D. and said second set 
of digits being D C 6 A. 

27. The system of claim 25, wherein said varying 
sequence is defined as said first set of digits being teprt- 
sented by the letter sequence A B C D, and said second set 
of digits being B A D C. 

28. The system of claim 25. wherein said predetomined 
offset number being represented by the letter sequence X X 
X X. said first set of digits being represented by the letter 
sequence A B C D. and said second set of digits being (A+X) 
(B+X) (C+X) (IKX). 

29. The system of claim 28. wherein X is a positive 
integer. 

30. The system of claim 28, wherein X is a negative 
integer. 

31. An in^oved method for the discreet identification 
and notification of a duress transaction at a remote transac- 
tion terminal of an automated banking system upon entering 
a non-prestored emergency nimabo-^ said remote transaction 
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terminal having a display, a card reader for reading a 
banking card, a cash dispenser, and computer means for 
processing a banking transaction, said improved method 
Gon^nising the steps of: 

storing a personal identification number of a first set of 
digits inchiding a last digit in one of said computa 
means and said banking card; 

providing a means for recognizing an access number of a 
second set of digits entered into said tenninal to autho- 
rize a transaction; 

providing means for checking said access number with 
said personal identification number; 

wboeby said method proceeds to allow a tsanldng trans- 
action if said access number is the same as said 
personal identification number; 

providing means for storing a logical step; 

providing a means for modifying one of said personal 
identification number and said access number acc(vd- 
ing to said logical step; 

providing a logical step means for recognizing said access 
number as said Don-[nestored emergency number being 
a formative of said personal identification number; 
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facilitating recall <^ said non-prestored emergency num- 
ber by directly coirelating said personal identification 
number to said non-prestorcd emergency number via 
said logical step; and 

triggering a duress signal upon the recognition of at least 
one of the following occuirences, 

(a) said second set of digits of said access number 
match and said first set of digits of said personal 
identification number in any varying sequence. 

(b) said second set of digits of said access number equal 
said first set of digits of said personal identification 
number minus at least said last digit. 

(c) said second set of digits of said access number equal 
said first set <^ digits of said personal identificatioo 
number plus at least an additional digit. 

(d) said second set digits of said access number equal 
said first set of digits of said personal identification 
luunber plus a predetermined offsci number; 

whereby said method facilitates recall of said non- 
prestoied emergency number. 
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